Jury orders Google to pay $425 million for violating user privacy

A federal jury has ordered Google to pay $425 million for violating user privacy by collecting data from approximately 98 million users even after they disabled tracking, specifically via the 'Web & App Activity' setting. The verdict, stemming from a class-action lawsuit covering data collection from July 2016 to September 2024, found Google liable for invasion of privacy and intrusion upon seclusion. Google plans to appeal the decision, asserting its privacy tools give users control and the verdict misunderstands its product functionality. This ruling underscores escalating legal and financial risks for major tech firms concerning data privacy compliance and user consent.

Analysis

A federal jury has ordered Google to pay a $425 million penalty in a class-action lawsuit for violating the privacy of approximately 98 million users. The verdict found the company liable for collecting user data through third-party apps from July 2016 to September 2024, even after users had explicitly disabled the "Web & App Activity" tracking setting. While the $425 million fine is a fraction of the over $31 billion in damages originally sought and is financially immaterial for a company of Alphabet's scale, the verdict carries significant legal and reputational weight. The finding of liability for "invasion of privacy" and "intrusion upon seclusion" establishes a damaging precedent and reinforces the themes of escalating legal and regulatory risks surrounding data collection practices. Google's stated intention to appeal, based on its claim that the verdict misunderstands its product functionality and user consent, indicates a prolonged legal battle. The strongly negative sentiment score (-0.7 for GOOG/GOOGL) reflects the headline risk, though the low market impact score (0.35) suggests the market views the immediate financial penalty as manageable.

Key Decisions for Investors

• The $425 million fine is not financially material, but investors should monitor Google's appeal process, as an unsuccessful appeal could set a costly precedent for future data privacy litigation.
• This verdict heightens the regulatory risk profile for Alphabet; consider this escalating legal scrutiny on data collection, a core component of its advertising business model, in your risk assessment.
• The strongly negative sentiment may cause short-term volatility, but investors should evaluate whether this legal setback represents a fundamental threat or a manageable, albeit persistent, operational risk in the current environment.
• Given the themes of Regulation and Data Privacy, investors should treat this not as an isolated incident but as a signal of systemic risk for tech firms reliant on user data, prompting a review of similar exposures across the portfolio.